path: root/utils/hwstub/tools
AgeCommit message (Collapse)AuthorFilesLines
2017-11-12hwstub: add code to dump STMP romAmaury Pouly2-1/+18
Change-Id: I083024662f3c085f7bcd2f85b0a68de85725b0f3
2017-11-12hwstub: expose read/write functionsAmaury Pouly1-0/+30
Previously only atomic read/write 8/16/32 were exposed. But it is useful to be able to read a whole buffer at once, this is more efficient than N times read8. Change-Id: I06e331641e1ab1f74c0e16e8c432eafb398e8e6d
2017-01-24hwstub: be more quiet about register description loading failureAmaury Pouly1-2/+4
Change-Id: I0edbb838022b71485179edec7361a6c554a1ab11
2017-01-24hwstub/jz4760b: add lua code to probe for ei/di and ext instructionsAmaury Pouly1-0/+67
Add lua code to check whether ei/di and ext instructions are supported. This is unclear since xburst is somewhere between mips32r1 and mips32r2. Details results are below, but in summary: they don't work (ei has no effect, di/ext cause illegal instruction exceptions) > ./hwstub_shell -q -b -e 'require("jz/misc"); JZ.misc.enable_sram()' \ -f lua/xburst.lua -e "XBURST.test_ext_inst(0xb32d0000)" [...] Selecting soc jz4760b. Redirecting HW to hwstub.soc.jz4760b data: d7168acf error: lua/xburst.lua:209: call failed trapped exception in call > ./hwstub_shell -q -b -e 'require("jz/misc"); JZ.misc.enable_sram()' \ -f lua/xburst.lua -e "XBURST.test_ei_di_inst(0xb32d0000)" [...] Selecting soc jz4760b. Redirecting HW to hwstub.soc.jz4760b Testing ei Test SR Enable interrupts with CP0 SR: 0x1 Disable interrupts with CP0 SR: 0x0 Test ei/di Enable interrupts with ei SR: 0x0 Disable interrupts with di error: lua/xburst.lua:244: call failed trapped exception in call Change-Id: I2e162b5dd5e70488bcd8b58f3ca401a3ecab3c4b
2017-01-24hwstub: add tool to dump memory regions (such as ROM, RAM, or peripherals)Amaury Pouly2-1/+163
Although this case be done with hwstub_shell, this is common enough to deserve its own tool. Change-Id: I9253e40850f37257464548a3acefb14ea083841d
2017-01-24hwstub: small fixes to argument processing and usage()Amaury Pouly2-5/+6
Change-Id: I3daa5e0c3fa2e7eab6a3d75b4c8aa66254d72f3c
2017-01-24hwstub: add Fiio X3II IPL/SPL dumping codeAmaury Pouly1-0/+50
Change-Id: I76f7cffc700e8051d02936c24e8a70a0f8925edf
2017-01-24hwstub: add Shanling M2 IPL/SPL dumping codeAmaury Pouly1-0/+50
Change-Id: I14987d9783dd371f4990a5bcfbfb2d1c0c9be213
2017-01-24hwstub: add various jz stuff and xburst testsAmaury Pouly2-0/+281
The JZ misc allows to enable and test SRAM. The XBurst code uses the coprocessor interface to analyse the cpu. It also provides a test platform for various features like EBASE and exceptions. I was able to test and confirm that on jz4760b (thus xburst), EBASE works (but top 2 bits are not controllable and always 01). The processor claims to support vector interrupts but this is untested. The values in ConfigX are not to be trusted blindly, clearly some are wrong. I tried to use the JZ4780 Config7 "ebase gate" to change bit 30 of EBASE but it does not work, which suggests that JZ480 uses a newer version of XBurst. Detailled log below: > ./hwstub_shell -q -f lua/xburst.lua -e "XBURST.init()" [...] XBurst: PRId: 0x2ed0024f CPU: JZ4760(B) Config: 0x80000483 Architecture Type: MIPS32 Architecture Level: Release 2 (or more) MMU Type: Standard TLB Config1: 0x3e63318a MMU Size: 32 ICache Sets per way: 128 Ways: 4 Line size: 32 DCache Sets per way: 128 Ways: 4 Line size: 32 FPU: no Config2: 0x80000000 Config3: 0x20 Vectored interrupt: yes Config7: 0x0 > ./hwstub_shell -q -e 'require("jz/misc"); JZ.misc.enable_sram()' \ -f lua/xburst.lua -e "XBURST.test_ebase(0x80000000);XBURST.test_ebase(0xb32d0000) [...] Testing EBASE... Disable BEV SR value: 0x2000fc00 EBASE value: 0x80000000 Value after writing 0x80000000: 0x80000000 Value after writing 0x80040000: 0x80040000 Test result: EBase seems to work Disable config7 gate: write 0x0 to Config7 Value after writing 0xfffff000: 0xbffff000 Enable config7 gate: write 0x80 to Config7 Value after writing 0xc0000000: 0x80000000 Config7 result: Config7 gate does not work Exception test with EBASE at 0x80000000... Writing instructions to memory Old SR: 0x2000fc00 New SR: 0xfc00 EBASE: 80000000 Before: cafebabe After: deadbeef Exception result: Exception and EBASE are working Testing EBASE... Disable BEV SR value: 0x2000fc00 EBASE value: 0x80000000 Value after writing 0x80000000: 0x80000000 Value after writing 0x80040000: 0x80040000 Test result: EBase seems to work Disable config7 gate: write 0x0 to Config7 Value after writing 0xfffff000: 0xbffff000 Enable config7 gate: write 0x80 to Config7 Value after writing 0xc0000000: 0x80000000 Config7 result: Config7 gate does not work Exception test with EBASE at 0xb32d0000... Writing instructions to memory Old SR: 0x2000fc00 New SR: 0xfc00 EBASE: b32d0000 Before: cafebabe After: deadbeef Exception result: Exception and EBASE are working Change-Id: I894227981a141a8c14419b36ed9f519baf145ad1
2017-01-24hwstub: add support for coprocessor operationsAmaury Pouly1-4/+68
At the moment the stub only implement them for MIPS. Change-Id: Ica835a0e9c70fa5675c3d655eae986e812a47de8
2017-01-24hwstub: implement EXEC command over netAmaury Pouly1-9/+37
Apparently I completely forgot to implement it so using hwstub over net would just fail all EXEC commands :-s Change-Id: I0d0506cbbce9b86c9a4f19036dacc922d1e51338
2017-01-24hwstub/jz4760b: fix some typos in lua script after register name changesAmaury Pouly2-9/+10
Change-Id: Ie46ec293fcd5a16143818e77cd6c79cc08620fb5
2017-01-24hwstub/tools/shell: add JZ4760B and Fiio X1 codeAmaury Pouly5-0/+686
The jz code can do several useful things like dumping the IPL and SPL. The Fiio code can play with backlight and has code do dump the IPL and SPL with the correct parameters (extracted by reverse engineering). Change-Id: I317b3174f5db8d38c9a56670c1d45565142ec208
2016-12-12hwstub/tools: always run make for the librariesAmaury Pouly1-2/+5
This ensures that the libs are always up-to-date hopefully. Change-Id: I790302fcabc91457091006de749b76735fdd510f
2016-12-12hwstub: various cleanupsAmaury Pouly2-4/+21
- hwstub load now properly stops reading the log when the device returns a 0 size buffer instead of STALLing - add debug output option to hwstub_load - correctly report transfered size on write error - add some debug error message in usb code so that some errors can be diagnosed more easily - add a batch mode to hwstub_shell to disable the interactive shell - increase usb control timeout to 1sec, 100ms was really tight - cap usb buffer size to ~4000 bytes because libusb has a hardwired limit of 4096 bytes for control transfers Change-Id: Id3200ab99ce70a7a3b09ce7faeaafa4a0fac64c7
2016-11-20hwstub/tools: fix compilation of shell against lua5.3Amaury Pouly1-49/+67
The unsigned function were deprecated and hidden begind a compat flag. Since they will get removed in the next version, I simply reimplemented them, those are mostly casts anyway. Change-Id: Ie5db81d7c8589b1e5e9b45a2a4ed41919aa07387
2016-11-06hwstub_shell: fix a horrible bugAmaury Pouly1-1/+1
Change-Id: I4ac259e6cd7b707ca725c6ba1c526f5aeed56b71
2016-10-22hwstub: fix compile and linking orderingAmaury Pouly2-5/+5
Change-Id: I0acd3db2f644f4521da715d4931315bdb7548eae
2016-04-08hwstub: port hwstub_shell to the new libraryAmaury Pouly9-266/+740
Also use this opportunity to cleanup support for multiple devices: the shell now supports dynamic changes in the device and will call init() everytime a new device is selected, to prepare a new environment. The shell now honors register width on register read/write. The shell also provides access to variants as follows by creating a subtable under the register using the variant type in UPPER case and having the same layout as a register. For example if register HW.GPIO.DIR has variants "set" and "clr", those can be used like this: HW.GPIO.DIR.SET.write(0xff) HW.GPIO.DIR.CLR.write(0xff00) Change-Id: I943947fa98bce875de0cba4338e8b7196a4c1165
2016-04-08hwstub: port hwstub_load to the new libraryAmaury Pouly1-51/+43
Change-Id: I7e8ae50907401a9480a0da809a4470f1728d3a57
2016-04-08hwstub: rewrite and expand libraryAmaury Pouly3-4/+358
Rewrite the hwstub library in C++, with a clean and modular design. The library was designed from the ground up to be aware of multithreading issues and to handle memory allocation nicely with shared pointers. Compared to the original library, it brings the following major features: - support for JZ boot devices, it is very easy to add support for others - support for network transparent operations (through sockets): both tcp and unix domains are support Change-Id: I75899cb9c7aa938c17ede2bb3f468e7a55d625b4
2015-11-17hwstub: fix atj213x dsp lua codeMarcin Bukat1-9/+9
Change-Id: I5fbd1799b958bedbe74f91bdcdd8a544e15d2a78
2015-11-17hwstub: Add ajt213x lua interface for DSP blockMarcin Bukat2-0/+159
With this you can upload and run code on DSP core in atj213x. The files can be produced using as2181. You can download this assembler from You should use extended mode (-x switch) since DSP core in atj is non standard and uses 24bit operands. PX register has different meaning as well and is used as MSB when loading other registers with immediates (immediate field is 16bit in instruction so to set register to 24bit value you need to store MSB in PX prior to this). MAC MR is 56bit accordingly. HIP interface seems to be mapped at standard addresses (except that regular 218x doesn't have HIP). Have a fun! Change-Id: I9a80ca0dd3718ba8435ae8579bfffa66e067e022
2015-09-11soc_desc: new version of the desc file formatAmaury Pouly2-155/+224
Fix qeditor to use the old soc_desc_v1. Port hwstub_shell to the new description format. Change-Id: I9fefbff534bfaa5c3603bb3dd8307a2b76e88cfc
2015-06-28hwstub: Add completion and some pretty printing to the shellMarcin Bukat5-18/+1724
This uses slightly hacked luaprompt to provide all the goodis. See for original. Change-Id: Iedddb79abae5809299322bc215722dd928c35cca
2014-11-28hwstub_shell: add support for call and jumpMarcin Bukat4-0/+54
Change-Id: Ie09d0db21831b79255da858bada7382a08ff4eef Reviewed-on: Reviewed-by: Marcin Bukat <> Tested: Marcin Bukat <>
2014-11-28hwstub: lua functions for atj213x/irivere150Marcin Bukat4-1/+214
Change-Id: I3ab32996b4b6603fd7d66eee5b3bfd795b79eee1 Reviewed-on: Reviewed-by: Marcin Bukat <> Tested: Marcin Bukat <>
2014-11-18hwstub/qeditor: add support for atomic read/writesMarcin Bukat2-8/+8
The current code assumed that READ/WRITE would produce atomic read/writes for 8/16/32-bit words, which in turned put assumption on the memcpy function. Since some memcpy implementation do not always guarantee such strong assumption, introduce two new operation READ/WRITE_ATOMIC which provide the necessary tools to do correct read and write to register in a single memory access. Change-Id: I37451bd5057bb0dcaf5a800d8aef8791c792a090
2014-11-15hwstub_shell: add atj targetAmaury Pouly3-0/+12
Change-Id: I566694f19dfb110dbf245be7b7f139a4c616e16b Reviewed-on: Reviewed-by: Amaury Pouly <>
2014-09-08hwstub: trivial changesAmaury Pouly1-1/+1
Change-Id: Iacb1721db1ae59d5f359d244fd68234915e611cf
2014-09-07hwstub: fix compile issueAmaury Pouly1-1/+1
Change-Id: I939c05d3c1319b122fe64bff0f0ea300ecbd1180
2014-09-07hwstub_shell: add support for set/clr/tog without SCT using read and writeAmaury Pouly1-1/+41
Change-Id: Ib0a5123e5cc51ee193ef761c36af63467740c670
2014-09-07hwstub: don't put revision in the protocol, it's specific to the implementationAmaury Pouly2-8/+6
Change-Id: I1311a22da41fe977f1613f1e313a864baa03027c
2014-09-07hwstub: remove protocol to make it use its own interfaceAmaury Pouly1-5/+12
This way, hwstub can be implemented along with other usb features/interfaces. Change-Id: I7148cab845049cc0a8b8e740fa0d52d3a385eaed
2014-06-15hwstub: load rk27xx specific bitsMarcin Bukat1-0/+2
Change-Id: Ie0c68925f933aebeb9b3497800a29de2d69fead2
2014-06-15hwstub: Add support for rk27xx lradc blockMarcin Bukat2-0/+20
Change-Id: I8fe15ad8207ac7098944bb85d6b66b91b9858e8f
2014-05-11hwstub: add some PP and Sansa View codeAmaury Pouly3-0/+235
Change-Id: If188a01adee2a0e1c7a46c424a0a9cde9f666831
2014-05-11hwstub: hwstub_shell can now run files/cmd provides on command lineAmaury Pouly1-4/+31
Change-Id: Id5cb3bee52b39e2ddec95c646ca9b4a3334bdf92
2014-05-11hwstub: fix hwstub_shellAmaury Pouly2-2/+5
Change-Id: I008a55675054c86fd206cc5248f2bd9475e80b49
2014-04-12hwstub: add proper PP supportAmaury Pouly3-0/+87
- drop support for PP500x: it's very different from other PP and although it would be possible to support them, I don't have one to test the code - make sure only the CPU is started - add PP descriptor to report chip ID and revision - add code in shell and lua to support pp (no register description yet) - compile for ARMv4 because PP502x is an ARM7TDMI Change-Id: I36c4e465dfc2cfdfe7433b2f65cc8f6f0720fe62
2014-02-12Fix redAmaury Pouly1-5/+5
Change-Id: Ib64eb3539e33d4336c298612b4508c4611b80c9e
2014-02-10hwstub/regtools/qeditor: put soc descriptors in a list instead of a vectorAmaury Pouly1-5/+5
A SoC descriptor is not a small object: it can be as large as ~100KiB so it's better to avoid copying things over. Change-Id: I1ef862e1260299cdaa0c4d2822ac45968713498a
2014-02-10utils/hwstub: completely rework the protocol, drop unused featuresAmaury Pouly3-150/+71
The protocol has evolved a lot during the 2.x.y lifetime, bringing more features which later got unused. This commit removes all the unused stuff and simplifies everything: - drop the feature mask: everything is mandatory or stalled on error - remove the info request and put all static information in standard USB descriptors which are part of the configuration descriptor (and can be retrieved using the standard GetDescriptor request). - remove the USB interface, we had only one anyway - remove all endpoint descriptors - remove the exit/atexit stuff, it never worked as intended anyway - update the hwstub library and make it able to handle any device - update the tools (mostly renaming and removing of code) Change-Id: I1872bba7f4177fc3891180e8f944aab88f5bde31
2013-12-24hwstub: update zenxfistyle codeAmaury Pouly1-12/+8
Change-Id: I7e85101eca7dfc0f68c215936be4aa19749923ad
2013-12-24hwstub: use delay in zenxfistyle codeAmaury Pouly1-7/+7
Change-Id: Ia9576162b3b28d3778fe479cc321c879d73247c6
2013-12-24hwstub: fix lcdif pin setup for 18-bit busAmaury Pouly1-1/+8
Change-Id: I30a2cedb1170abbee5a80c33206c147eb4207ca5
2013-12-24hwstub: add delay functionAmaury Pouly2-0/+21
Change-Id: Iab208ed59a9a2540a64b190357411d3de28f288e
2013-12-24hwstub: add ZEN X-Fi Style code (preliminary)Amaury Pouly1-0/+187
Change-Id: I535d54bc3fb2263c174b7ae983ea4f5ed68e6390
2013-12-24hwstub: fix lcdif code for 18-bit word lengthAmaury Pouly1-0/+5
Change-Id: I38cf0b5808443d5c19ebddb329c2a1636bcc4b28
2013-12-06hwstub: implement i2c and i2c eeprom dumpAmaury Pouly2-1/+72
Change-Id: Iff1b4f40affb88c104e7322e25cdbe34f8886476